agentsclimarketplace
Sign in

Afrexai compliance audit

Skill aAAaqwq/AGI-Super-Team/skills/afrexai-compliance-audit

Run internal compliance audits against major governance and security frameworks, highlighting gaps, risks, and remediation priorities.From its SKILL.md

Install
npx -y skills add aAAaqwq/AGI-Super-Team --skill afrexai-compliance-audit

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

2.7 KB, 613 tokens by cl100k_base, as published. Nobody here has run it

Compliance Audit Generator

Run internal compliance audits against major frameworks without hiring a consultant.

What It Does

Generates a structured compliance audit for your organization against any of these frameworks:

  • SOC 2 (Type I & II) — Trust Services Criteria
  • ISO 27001 — Information Security Management
  • GDPR — Data Protection (EU/UK)
  • HIPAA — Healthcare Data (US)
  • PCI DSS — Payment Card Security
  • SOX — Financial Controls (US public companies)
  • CCPA/CPRA — California Consumer Privacy

How to Use

Tell the agent which framework you need audited. Provide context about your organization:

  • Industry and size
  • Current security controls
  • Data types you handle
  • Existing certifications
  • Known gaps or concerns

Example Prompts

  • "Run a SOC 2 readiness audit for our 40-person SaaS company"
  • "Check our GDPR compliance — we process EU customer data and use AWS"
  • "Generate an ISO 27001 gap analysis for our fintech startup"
  • "Audit our HIPAA controls — we're a healthtech handling PHI"

Output Format

The agent produces:

1. Executive Summary

  • Overall readiness score (0-100%)
  • Critical gaps count
  • Estimated remediation timeline

2. Control-by-Control Assessment

For each control domain:

  • Status: Compliant / Partial / Non-Compliant / Not Assessed
  • Evidence Required: What auditors will ask for
  • Current Gap: What's missing
  • Remediation Steps: Specific actions to close the gap
  • Priority: Critical / High / Medium / Low
  • Effort: Hours/days estimate

3. Remediation Roadmap

  • Phase 1 (0-30 days): Critical fixes
  • Phase 2 (30-90 days): High priority items
  • Phase 3 (90-180 days): Full compliance

4. Evidence Checklist

  • Document inventory needed for audit
  • Policy templates to create
  • Technical configurations to verify

Agent Instructions

When the user requests a compliance audit:

  1. Ask which framework(s) they need assessed
  2. Gather context about their organization (industry, size, tech stack, data types)
  3. Generate the full audit report following the output format above
  4. For each control area, be specific — don't give generic advice. Reference the actual control numbers (e.g., SOC 2 CC6.1, ISO 27001 A.8.2)
  5. Prioritize findings by business risk, not alphabetical order
  6. Include cost estimates where possible (e.g., "penetration test: $5,000-$15,000")
  7. Flag any controls that require third-party tools or services

Be direct. No filler. Every finding should have a clear "do this" action attached.

What ships with it: 2 files

2.1 KB alongside SKILL.md

Gives 1 of the 12 instructions most audit compliance skills give in 613 tokens

Counted across 960 of the 1,589 authors here whose files we hold, read 2026-09-06

  • Read product marketing context before asking questionsin 29 of 960, across 11 files
  • Rank findings by severityin 29 of 960, across 22 files
  • Generate audit reporthere, and in 22 of 960
  • Run the audit scriptin 20 of 960, across 19 files
  • Generate a prioritized action plan reportin 19 of 960, across 11 files
  • Ensure one H1 per pagein 15 of 960, across 5 files
  • Ensure sitemap exists and is accessiblein 14 of 960, across 4 files
  • Verify alt text on all imagesin 12 of 960, across 3 files
  • Determine the audit scope before startingin 12 of 960, across 4 files
  • Verify important pages allowed in robots.txtin 11 of 960, across 2 files
  • Detect business type from homepage signalsin 11 of 960, across 7 files
  • Delegate specialized tasks to subagentsin 11 of 960, across 7 files

Said here and by no other author read

  • Ask which framework the user needs assessed
  • Gather context about the user organization
  • Reference actual control numbers
  • Include cost estimates where possible
  • Flag controls requiring third-party tools

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.